Privacy Policy — PolicyReady

Last updated: September 23, 2026

PolicyReady ("the app") is published by Baker Ventures LLC ("we," "us"). This policy explains what the app does with your information. It is short because the app does very little with it.

The short version

PolicyReady collects nothing. There is no account, no sign-in, and no server of ours for the app to talk to. Everything you type — your business name, your answers to the control questionnaire, your notes — is written to a database on your own device and never leaves it unless you deliberately share an exported summary yourself.

1. What the app collects, and every use of it

The app does not transmit any information to us or to anyone else. The following is stored locally on your device, in a SQLite database (cyberclose.db) that belongs to the app's own sandbox:

What is storedWhere it comes fromEvery use it is put to
Business/profile nameYou type it (you can keep several profiles, e.g. a broker working through multiple clients)Labelling your assessments in the app, and appearing as the heading of a summary you choose to export
Your answer to each security control (in place / partially in place / not in place / not yet assessed)You tap it in the questionnaireComputing your readiness score, your per-category breakdown, and your prioritized gap list; appearing in a summary you choose to export
Free-text notes you attach to a controlYou type themShown back to you against that control; included in a summary you choose to export
App settings (a single on/off flag, set only inside a development build and reachable by no one using the released app)Set by a developer in a development build onlyExercising a screen state during development; it changes nothing in the released app, which is free with every feature unlocked

That is the complete list. There is no hidden second category.

What the app does not collect at all: no name, email address, phone number, postal address, or any other contact detail; no account credentials; no payment or financial information; no precise or coarse location; no contacts, photos, camera, microphone, calendar, or health data; no advertising identifier; no device identifier; no crash reports; no usage or diagnostic telemetry. The app requests no operating-system permissions.

No tracking. The app does not track you across apps or websites, does not use an advertising SDK, and does not build or buy a profile about you. Because it collects nothing, there is nothing to sell, and we do not sell or share personal information with anyone, for any purpose, ever.

No AI or LLM is used anywhere in the app. All guidance text is static and written in advance, so nothing you type is sent to a model provider for processing.

2. Third parties

There are none. The app contains no analytics SDK, no crash-reporting SDK, no advertising SDK, no attribution SDK, and no backend of ours. It makes no network requests of any kind — it will function identically in airplane mode. No third party receives your data from this app, because the app sends your data to no one, and consequently no third party processes, stores, or discloses it on our behalf.

The only moment anything leaves the app is one you start deliberately:

3. Retention, deletion, and withdrawing consent

Retention. Your data stays on your device for as long as you keep it there. We hold nothing, so there is no retention period on our side to describe, no backup of yours we keep, and no record we could produce about you if asked.

Deletion — in the app. "Delete business" on a profile's screen deletes that profile and all of its answers and notes from the device immediately.

Deletion — everything. Uninstalling the app removes the app's entire local database, including every profile, answer, and note. There is no account to close afterwards and no server copy to request the deletion of, because none was ever created.

Your exported files are yours. A PDF or text summary you already shared is outside the app's control — delete it wherever you sent it.

Withdrawing consent. Since the app collects, transmits, and shares no personal data, there is no data-processing consent to grant or revoke, no tracking prompt to decline, and no marketing list to unsubscribe from. If you no longer want the app holding your answers, delete the profile or uninstall the app, as above, and nothing about you remains anywhere.

Your rights. Rights to access, correct, port, or erase your data (GDPR, CCPA/CPRA and similar laws) are exercised directly in the app: your data is in your hands, on your device, viewable and editable and deletable at any time without asking us. We cannot access it, so we cannot produce, correct, or delete it on your behalf.

4. Children

PolicyReady is a business tool for people running or advising a small business. It is not directed at children, and it collects no personal data from anyone of any age.

5. Not insurance, legal, or security advice

PolicyReady is a self-assessment organizational tool. It is not insurance, legal, or security-audit advice, it does not certify compliance with any insurer's requirements, and using it creates no professional relationship. The insurer's own application and its definitions always govern. See the Terms of Use for the full statement.

6. Changes to this policy

If the app ever changes what it stores, contacts, or shares, this page and the in-app privacy screen will be updated in the same release that makes the change, and the date above will change with it.

7. Contact

Questions about this policy, or about privacy in the app: rsb.baker+policyready@gmail.com

Baker Ventures LLC